39 matches found
CLSA-2025-1765930087 TuxCare security update for org.springframework (4 CVEs)
TuxCare rebuilt 24 org.springframework packages to address 4 CVEs. Fixed in 5.3.29-tuxcare.3...
CLSA-2025-1765411678 TuxCare security update for org.springframework (5 CVEs)
TuxCare rebuilt 24 org.springframework packages to address 5 CVEs. Fixed in 5.3.29-tuxcare.2...
CLSA-2025-1761523598 TuxCare security update for org.springframework (1 CVE)
TuxCare rebuilt 24 org.springframework packages to address 1 CVE. Fixed in 5.3.39-tuxcare.9...
CLSA-2025-1759795579 TuxCare security update for 4 packages (18 CVEs)
TuxCare rebuilt 4 packages to address 18 CVEs. Fixed in 9.0.83-tuxcare.1...
CLSA-2025-1751328209 TuxCare security update for org.springframework (7 CVEs)
TuxCare rebuilt 24 org.springframework packages to address 7 CVEs. Fixed in 5.3.27.tuxcare.1...
MAL-2026-10934 Malicious code in twilio-internal (npm)
The twilio-internal package is one of four byte-identical dependency-confusion squats of Twilio's npm namespace published by user 'yuva2210' maintainer email [email protected], all at the sentinel version 99.99.99 chosen to outrank any internal/private version and win resolution against ...
MAL-2026-10933 Malicious code in twilio-deploy (npm)
The twilio-deploy package is one of four byte-identical dependency-confusion squats of Twilio's npm namespace published by user 'yuva2210' maintainer email [email protected], all at the sentinel version 99.99.99 chosen to outrank any internal/private version and win resolution against a...
Malicious code in twilio-serverless (npm)
The twilio-serverless package is one of four byte-identical dependency-confusion squats of Twilio's npm namespace published by user 'yuva2210' maintainer email [email protected], all at the sentinel version 99.99.99 chosen to outrank any internal/private version and win resolution agains...
CVE-2026-48523 vulnerabilities
Vulnerabilities for packages: openstack-placement-2025.2-fips, datadog-agent, openstack-glance-2025.2, metaflow-service-fips, openstack-horizon-2025.1, awx, wazuh-manager-fips, litellm, openstack-horizon-2025.1-fips, openstack-horizon-2025.2, openstack-keystone-2026.1,...
MAL-2026-5155 Malicious code in @ownit/core (npm)
Dependency confusion attack campaign targeting Scandinavian telecommunications and digital services organizations Telenor, Ownit, Vimla, and Customer 360 / C360. Four packages published by the debating0166 npm account use inflated version numbers 99.0.x to win npm registry resolution over private...
Malicious npm Packages Impersonate Flashbots, Steal Ethereum Wallet Keys
A new set of four malicious packages have been discovered in the npm package registry with capabilities to steal cryptocurrency wallet credentials from Ethereum developers. "The packages masquerade as legitimate cryptographic utilities and Flashbots MEV infrastructure while secretly exfiltrating...
CVE-2020-14796 vulnerabilities
Vulnerabilities for packages: openjdk-26-openj9, openjdk-21-openj9, openjdk-17-openj9, openjdk-8-openj9, openjdk-11-openj9, openjdk-25-openj9...
CVE-2017-3526 vulnerabilities
Vulnerabilities for packages: openjdk-26-openj9, openjdk-21-openj9, openjdk-17-openj9, openjdk-8-openj9, openjdk-11-openj9, openjdk-25-openj9...
CVE-2022-21282 vulnerabilities
Vulnerabilities for packages: openjdk-26-openj9, openjdk-21-openj9, openjdk-17-openj9, openjdk-8-openj9, openjdk-11-openj9, openjdk-25-openj9...
CVE-2011-3563 vulnerabilities
Vulnerabilities for packages: openjdk-26-openj9, openjdk-21-openj9, openjdk-17-openj9, openjdk-8-openj9, openjdk-11-openj9, openjdk-25-openj9...
GHSA-6Q5R-8QC5-J49X vulnerabilities
Vulnerabilities for packages: openjdk-26-openj9, openjdk-21-openj9, openjdk-17-openj9, openjdk-8-openj9, openjdk-11-openj9, openjdk-25-openj9...
GHSA-9WPW-6VG5-7W9G vulnerabilities
Vulnerabilities for packages: openjdk-26-openj9, openjdk-21-openj9, openjdk-17-openj9, openjdk-8-openj9, openjdk-11-openj9, openjdk-25-openj9...